|
Port 1321 Details
known port assignments and vulnerabilities
threat/application/port search:
| Port(s) |
Protocol |
Service |
Details |
Source |
| 1321 |
tcp,udp |
pip |
Backdoor.Win32.Jtram.a / Insecure Credential Storage - the malware listens on TCP port 1321 as an FTP server. The credentials are stored in cleartext in a file named "rconnect.conf.
References: [MVID-2022-0442]
Backdoor.Win32.Jtram.a / Port Bounce Scan - the malware listens on TCP port 1321. Third-party intruders who successfully logon can abuse the backdoor FTP server as a man-in-the-middle machine allowing PORT Command bounce scan attacks using Nmap. This vulnerability allows remote attackers to abuse your system and discreetly conduct network port scanning. Victims will then think these scans are originating from the infected system running the afflicted malware FTP Server and not you.
References: [MVID-2022-0443]
PIP (IANA official) |
SG
|
| 1321 |
tcp,udp |
pip |
PIP |
IANA
|
|
2 records found
|